please recommend me good router for privacy/security in mind

honey2015

Reputable
Oct 8, 2015
87
0
4,640
As title say...

Range and such specs are not primary here because I cover very small area (it is even better to have smaller range :D ). I also do not work with big amounts of data.

I would like to know if there is routers which provide extra security compared to most others, in that case, I would not hesistate to invest in it.

Here where I live you can buy for example Cisco 1841, i RV220W-E-K9-G5, and plenty of others from Cisco, Asus, TP Link, etc, but these two are from most expensive.

I personally have little to no expirience about this so I must ask for help. tnx!

Please recommend models which are best in terms of security, so I will look for them if they are available for sale here.
 
Solution
The Wifi is protected by WPA encryption. All this is handled by the wireless chipset itself. All the WiFI functionality is within the chips, even in a router the main router OS is not involved. This is mostly for performance rather than security but since it is isolated it prevent most hacking due to any errors in the router OS.

Most high end firewall do not have wireless abilities because the firewall itself will not be able to do much more than the wireless chipset already does.

Now if you assume that someone has plugged into your ethernet then I do not know what to say....they could technically cable past anything you put in.

If you want to waste your money go buy a palo alto firewall, be aware to get the best option there...
Most secure = ethernet....
You can get an ethernet switch or powerlinks if covering multiple systems.
If you're going wifi just get whatever router best suits your speeds from a reputable brand like TP Link/Asus (preferably a dual band one if you have the speeds) and WPA-2 protect it.
 
Pretty much any router that does NAT, which is all of them, gives you protection from attack from the internet. As long as you do not set any port forwarding or DMZ no traffic from the internet can get to your internal machines. This is purely because NAT is stupid and if it does not know what to do with traffic it discard it. This by itself provides most the function any firewall would do.

The only thing left is traffic coming from your machines. Not much a router can do if you intentionally go to some site that causes damage. Most other bad internet sites are best protected with software on the pc. A lot of traffic is now encrypted so the router has no ability to actually see a lot of the stuff going on, the end device though since it is running the encryption can see.
 

honey2015

Reputable
Oct 8, 2015
87
0
4,640



I had already read somewhere discussions about NAT vs SPI.

What that mean, is that kind of routers, or king of firewall sistems?

Should I look for router which is SPI, or any of these newer reputable routers have both of these protections? I'm asking because I had read SPI is better and more secure compared to NAT.
 
You are getting to far into the details that likely do not matter.

You only really need a firewall if you are running some kind of server which you never should do from your house anyway because of the performance.

If you have a server exposed to the internet and you want to protect then you need a actual firewall. With NAT you have 2 choice basically ON or OFF. BUT if you do not need to allow access at all then a why waste the money on a firewall when you are going to block all traffic.

Again stateful firewalls are very limited in protecting traffic coming from your internal machine the traffic is encrypted. You are better off using the firewalls on the end devices and doing your SPI there where they can see more of the traffic.

So if you do not plan to run a server then you do not actually need a firewall. If you do plan to run a server then your question is massively more complex because there are huge difference in firewalls.
 

honey2015

Reputable
Oct 8, 2015
87
0
4,640
no, I do not run server. but I want as much as possible protection on my network. imagine I will have attacker on it (who will try to access my wifi), so lets make work for him as hard as possible. in that case, does router choice matters at all? if does, I would gladly invest in more expensive and better ones.
 
The Wifi is protected by WPA encryption. All this is handled by the wireless chipset itself. All the WiFI functionality is within the chips, even in a router the main router OS is not involved. This is mostly for performance rather than security but since it is isolated it prevent most hacking due to any errors in the router OS.

Most high end firewall do not have wireless abilities because the firewall itself will not be able to do much more than the wireless chipset already does.

Now if you assume that someone has plugged into your ethernet then I do not know what to say....they could technically cable past anything you put in.

If you want to waste your money go buy a palo alto firewall, be aware to get the best option there are yearly licenses for content filters and such. I suspect your main problem is going to be that you do not have enough knowledge to actually configure these securely. The more complex the device the more chance you have of messing up because you do not actually understand what the firewall is doing behind the covers.
 
Solution